v3.15.10: Project-confined paths, redacted failures, real fleet runs, safe dreams

What's New

3.15.10 is a hardening release. Tools only touch files inside your project, tool output no longer leaks secrets, and fleet runs do real work and report real results. Learning data is safer during dreams, consolidation and schema upgrades.

Security

• Every MCP tool and task handler that takes a file path now opens it only inside the project root. Outside paths, symlinks that point out, .. tricks, devices, FIFOs and oversized files are refused before anything is read. Set AQE_PROJECT_ROOT to reach sibling packages in a monorepo.
• Secrets in test failures are redacted everywhere they used to leak: connection strings, API keys and bearer tokens in MCP responses, CLI output, saved results and the memory database.
• Lookups keyed by user input no longer reach inherited object properties. That closes a prototype-pollution write and a gate-verification bypass.

Fixed

• Learning data during dreams: a memory write made while a dream runs is now always kept. A dream's own results are written all at once or not at all (thanks @pacphi, #1060).
• Pattern consolidation deletes nothing until the archived copies have been verified.
• Schema v14 is an additive migration, and processes that start at the same moment no longer fail with "database is locked".
• Learning success rates now count only measured outcomes. Before, they always read 100%.
• Queen scheduling: freed slots are reused, the concurrency limit is respected, and failures are reported once.
• Git, metric and browser calls no longer block the MCP server. A git timeout is reported as unavailable, never as 0.
• Retries now rerun tests inside describe blocks, and their results are reported.
• fleet_status stays healthy during normal test runs and still shows real problems.

Changed

• aqe fleet run scan|analyze|test runs real handlers, prints the results with a verdict, and exits 1 on findings or a failed gate.
• task_orchestrate routes to real handlers and adds an inferredType field to its response.
• Index tasks without paths are refused when they are submitted.
• Interpolation no longer resolves inherited values.
• enableBranching is deprecated and no longer has any effect.

Known issues

#1022, #1147, #1149, #1153, #1154, #1157, #1158, #1161, #1164, #1165

Thanks to @rudycelekli (#1086, #1088, #1092, #1132) and @pacphi.

Getting Started

npx agentic-qe init --auto

See CHANGELOG and release notes for full details.

🤖 Generated by Ruflo & AQE